CVE-2008-1693

The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, relate...

CVE-2008-1693

CVE-2008-1693 involves Poppler (and associated viewers such as Xpdf, Evince, gpdf, kdegraphics, xpdf) where CairoFont::create in CairoFontEngine.cc mishandles embedded PDF fonts, leading to possible remote code execution via a crafted font object. Root cause: dereferencing a function pointer tied...

CVE-2008-1693

The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, relate...

xpdf: embedded font vulnerability

The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, relate...

xpdf: embedded font vulnerability

The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, relate...

Poppler, KDE: User-assisted execution of arbitrary code

Background Poppler is a cross-platform PDF rendering library originally based on Xpdf. KOffice is an integrated office suite for KDE. KWord is the KOffice word processor. KPDF is a KDE-based PDF viewer included in the kdegraphics package. Description Alin Rad Pop Secunia Research discovered sever...

Fedora 8 : koffice-1.6.3-13.fc8 (2007-3093)

This update includes fixes to pdf import filters that can cause crashes possibly execute arbitrary code. See http://www.kde.org/info/security/advisory-20071107-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenabl...

Ubuntu 5.04 / 5.10 / 6.06 LTS : wv2 vulnerability (USN-300-1)

libwv2 did not sufficiently check the validity of its input. Certain invalid Word documents caused a buffer overflow. By tricking a user into opening a specially crafted Word file with an application that uses libwv2, this could be exploited to execute arbitrary code with the user's privileges. T...

Ubuntu 6.06 LTS / 6.10 / 7.04 : koffice vulnerability (USN-496-1)

Derek Noonburg discovered an integer overflow in the Xpdf function StreamPredictor::StreamPredictor. By importing a specially crafted PDF file into KWord, this could be exploited to run arbitrary code with the user's privileges. Note that Tenable Network Security has extracted the preceding...

GLSA-200710-08 : KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-08 KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow KPDF includes code from xpdf that is vulnerable to an integer overflow in the StreamPredictor::StreamPredictor function. Impact : A remote attacke...

KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow

Background KOffice is an integrated office suite for KDE. KWord is the KOffice word processor. KPDF is a KDE-based PDF viewer included in the kdegraphics package. Description KPDF includes code from xpdf that is vulnerable to an integer overflow in the StreamPredictor::StreamPredictor function...

USN-496-1: koffice vulnerability

Derek Noonburg discovered an integer overflow in the Xpdf function StreamPredictor::StreamPredictor. By importing a specially crafted PDF file into KWord, this could be exploited to run arbitrary code with the user's privileges...

[USN-496-1] koffice vulnerability

=========================================================== Ubuntu Security Notice USN-496-1 August 03, 2007 koffice vulnerability CVE-2007-3387 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu...

CVE-2007-3054: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the kword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

[USN-410-1] poppler vulnerability

=========================================================== Ubuntu Security Notice USN-410-1 January 18, 2007 kdegraphics, koffice, poppler vulnerability CVE-2007-0104 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10...

CVE-2006-4513

Multiple integer overflows in the WV library in wvWare formerly mswordview before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word DOC file that produces 1 large LFO clfolvl values in the...

CVE-2006-4513

CVE-2006-4513 affects the WV library used by wvWare (formerly mswordview). The issue is two integer overflow flaws in the Word converter: LVL count and LFO count (wvGetLFO_records and wvGetFLO_PLF), exploitable via crafted DOC files to execute code. Affected products include AbiWord and KWord (an...

CVE-2006-4513: Undefined Security Weakness

Multiple integer overflows in the WV library in wvWare formerly mswordview before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word DOC file that produces 1 large LFO clfolvl values in the...

USN-300-1: wv2 vulnerability

libwv2 did not sufficiently check the validity of its input. Certain invalid Word documents caused a buffer overflow. By tricking a user into opening a specially crafted Word file with an application that uses libwv2, this could be exploited to execute arbitrary code with the user's privileges. T...

Ubuntu 5.04 / 5.10 : kdegraphics, koffice vulnerabilities (USN-236-2)

USN-236-1 fixed several vulnerabilities in xpdf. kpdf and kword contain copies of xpdf code and are thus vulnerable to the same issues. For reference, this is the original advisory : Chris Evans discovered several integer overflows in the XPDF code, which is present in xpdf, the Poppler library,...